bad_actor_poc

By lucky

Bad_actor_poc Alternatives

Similar projects and alternatives to bad_actor_poc

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better bad_actor_poc alternative or higher similarity.

bad_actor_poc reviews and mentions

Posts with mentions or reviews of bad_actor_poc. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-07-06.
  • Why is `const fn` different from other “const” things?
    4 projects | /r/rust | 6 Jul 2022
    I'm not suggesting people in this thread are wrong, but working for a security company gives a slightly different perspective. For example, there's really nothing stopping a rogue crate from exporting your private keys, just by using VS code. I wasn't thinking about this when I helped write that proposal, though.
  • Did somebody play around with macros yet?
    6 projects | /r/dartlang | 2 Jan 2022
    Hopefully they can make it impossible to delete files/folders or doing subtle stuff like this: https://github.com/lucky/bad_actor_poc (reading private keys via macros in rust and sending them to a remote server)
    6 projects | /r/dartlang | 2 Jan 2022
  • todo-or-die!
    4 projects | /r/rust | 6 Sep 2021
    Having less tools that can do things like https://github.com/lucky/bad_actor_poc is a relief.
  • Workspace Trust in VS Code
    3 projects | /r/vscode | 7 Jul 2021
    Code execution that may not be so obvious could be the preLaunchTask that runs before starting the app and can run a build that has an extra task executing arbitrary code unrelated to the build. What about the npm module that steals your crypto wallet private keys? Make a simple edit and a malicious linter is loaded from the node_modules folder, instead of the one that is installed globally. Even reading the code can be deceptive, attackers can use Unicode hacks to hide malicious code in plain sight. Heck, you don't even have to open any source code to be owned.
  • Visual Studio Code May 2021
    2 projects | /r/programming | 10 Jun 2021
  • Carnet: A Tool for Sandboxing Cargo and Buildscripts
    2 projects | /r/rust | 24 May 2021
    https://github.com/lucky/bad_actor_poc is one example
  • Fixated on end-user security, FOSS developers neglect their own...
    4 projects | /r/freesoftware | 24 May 2021
    It turns out that because Rust can execute code at compile time, simply opening a Rust source file in an editor with code completion support can cause a virus to be installed on my computer. Apparently I can't trust anything but basic text editors anymore...
  • Using Rust Macros to exfiltrate secrets
    2 projects | /r/programming | 14 May 2021
  • A note from our sponsor - InfluxDB
    www.influxdata.com | 28 Mar 2024
    Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality. Learn more →

Stats

Basic bad_actor_poc repo stats
12
322
0.0
almost 3 years ago
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com